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DETAILED ACTION 



1. Applicant's response filed on August 4, 2008 has been fully considered. 
Claims 1-24 are pending. 



Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 

3. Claims 1, 7, 11-12, 18, 24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Authurs et al. (U.S. Patent No. 4,896,934), hereinafter "Authurs", in 
view of Teraslinna et al. (U.S. Patent No. 4,991,171), hereinafter "Teraslinna". 

Referring to claim 1 : 

i. Authurs teaches: 

A method of providing physical port security in a digital 
communication system, comprising: 

receiving a frame of digital data at a network device (see figure 3 
'packet format', of Authurs); 

a destination port bit map based on the destination address 
information contained in said frame of digital data (see figure 3, element 'destination bit- 
map field'; and column 5, lines 50-54, of Authurs); 
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comparing said destination port bit map with a physical port security 
bit map to generate a bit map of allowed destination ports, wherein said physical port 
security bit map is generated based on information in said received frame of digital data 
(see column 5, lines 58-65; and column 6, lines 4-9, of Authurs); and 

forwarding said frame of digital data to one or more of said allowed 
destination ports (see figure 1, elements 14-1..14-n 'output ports', of Authurs). 

Authurs discloses generating the physical port security bit map. 
Authurs further discloses the destination port bit map. However, Authurs does not 
specifically mention generating the destination port bit map. 

ii. Teraslinna teaches a broadcast packet switch network wherein 
Teraslinna discloses generating a destination port bit map based on the physical 
address in the packet (see figure 4; and column 8, lines 18-21 , of Teraslinna). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Teraslinna into the method 
of Authurs to generate a destination port bit map. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Teraslinna into the system of Authurs to generate a destination 
port bit map, because Authurs teaches "The present invention relates to an optical 
switch for use in a fiber optic telecommunications network, and more particularly, to an 
optical switch with multicast capability." (see column 1, lines 5-8, of Authurs, emphasis 
added). Teraslinna teaches "The present invention relates to packet switching networks 
having packet broadcast capabilities." (see column 1, lines 10-11, of Teraslinna, 
emphasis added). Therefore, Teraslinna's teaching could enhance Authurs's system. 

Referring to claims 7, 18 : 

Authurs and Teraslinna teach the claimed subject matter: a method of 
providing physical port security in a digital communication system (see claim 1 above). 
Authurs further discloses the router (see column 2, lines 31-33, of Authurs). 
Referring to claim 1 1 : 

Authurs and Teraslinna teach the claimed subject matter: a method of 
providing physical port security in a digital communication system (see claim 1 above). 



Application/Control Number: 10/646,976 Page 4 

Art Unit: 2435 

Authurs further discloses that the bit map is generated dynamically (see column 5, lines 
58-65, of Authurs). 

Referring to claim 12 : 

i. Authurs teaches: 

A system for providing physical port security, comprising: 
At least one processor within a network device, said network device 
having a communication port for receiving digital data from a digital communications 
system and two or more physical data ports for forwarding said digital data, said at least 
one of processor enables (see figure 1, element 10; and column 2, lines 31-33, of 
Authurs): 

a destination port bit map based on destination address information 
contained in said received digital data (see figure 3, element 'destination bit-map field'; 
and column 5, lines 50-54, of Authurs); 

Comparing of said destination port bit map within a physical port 
security bit map to generate a bit map of allowed destination ports, wherein said 
physical port security bit map is generated based on information within said received 
digital data (see column 5, lines 58-65; and column 6, lines 4-9, of Authurs); and 

Forwarding of said digital data to one or more of said allowed 
destination ports (see figure 1, elements 14-1. .14-n 'output ports', of Authurs). 

Authurs discloses generating the physical port security bit map. 
Authurs further discloses the destination port bit map. However, Authurs does not 
specifically mention generating the destination port bit map. 

ii. Teraslinna teaches a broadcast packet switch network wherein 
Teraslinna discloses generating a destination port bit map based on the physical 
address in the packet (see figure 4; and column 8, lines 18-21, of Teraslinna). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Teraslinna into the method 
of Authurs to generate a destination port bit map. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Teraslinna into the system of Authurs to generate a destination 
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port bit map, because Authurs teaches "The present invention relates to an optical 
switch for use in a fiber optic telecommunications network, and more particularly, to an 
optical switch with multicast capability." (see column 1, lines 5-8, of Authurs, emphasis 
added). Teraslinna teaches "The present invention relates to packet switching networks 
having packet broadcast capabilities." (see column 1, lines 10-11, of Teraslinna, 
emphasis added). Therefore, Teraslinna's teaching could enhance Authurs's system. 
Referring to claims 24 : 

Authurs and Teraslinna teach the claimed subject matter: an 
intermediate network device (see claim 12 above). Authurs further discloses that the 
bit map is dynamically altered based on a variable parameter (see column 5, lines 58- 
65, of Authurs). 

4. Claims 2-5, 6, 8-10, 13-16, 17, 19-23 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Authurs et al. (U.S. Patent No. 4,896,934) in view of 
Teraslinna et al. (U.S. Patent No. 4,991 ,171 ), and further in view of Wieget (U.S. Patent 
No. 6,484,261 B1). 

Referring to claims 6, 17, 22 : 

i. Authurs and Teraslinna teach the claimed subject matter: a 
method of providing physical port security in a digital communication system (see claim 
1 above). However, they do not specifically mention the IP address. 

ii. Wieget teaches a graphical network security policy management 
wherein Wieget discloses the IP address (see column 2, lines 14 of Wieget). 

iii. It would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to combine the teaching of Wieget into the method of 
Authurs and Teraslinna to use IP address. 

iv. The ordinary skilled person would have been motivated to have 
applied the teaching of Wieget into the system of Authurs and Teraslinna to use IP 
address, because Authurs teaches using the information provided in a packet to 
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generate a port bitmap (see column 5, lines 58-65, of Authurs). And IP address is the 
information contained in the packet. Therefore, Wieget's teaching could enhance the 
system of Authurs and Teraslinna. 
Referring to claims 2, 13 : 

Authurs.Teraslinna, and Wieget teach the claimed subject matter: a 
method of providing physical port security in a digital communication system (see claim 
1 above). They further disclose the logical AND (see column 1 8, line 7 of Wieget). 
Referring to claims 3-5. 14-16. 23 : 

Authurs.Teraslinna, and Wieget teach the claimed subject matter: a 
method of providing physical port security in a digital communication system (see claim 
1 above). They further disclose the source address and the destination address (see 
column 2, lines 8-1 1 , of Weight). 
Referring to claims 8, 19 : 

Authurs.Teraslinna, and Wieget teach the claimed subject matter: an 
intermediate network device (see claim 12 above). They further disclose the network 
file server (see column 10, line 52-55 of Wieget). 
Referring to claims 9, 20 : 

Authurs.Teraslinna, and Wieget teach the claimed subject matter: an 
intermediate network device (see claim 12 above). They further disclose the local area 
network (see column 10, line 52-55 of Wieget). 
Referring to claim 10 : 

Authurs.Teraslinna, and Wieget teach the claimed subject matter: a 
method of providing physical port security in a digital communication system (see claim 
1 above). They further discloses the process (see column 7, line 62, of Wieget). 
Referring to claim 21 : 

Authurs.Teraslinna, and Wieget teach the claimed subject matter: an 
intermediate network device (see claim 12 above). They further disclose the IP data 
(see column 2, lines 14 of Wieget). 
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Response to Arguments 

5. Applicant's arguments, filed on August 4, 2008, have been fully 
considered and are persuasive. Therefore, the rejection has been withdrawn. 
However, upon further consideration, a new ground(s) of rejection is made in view of 
Authurs, and Teraslinna. 



Conclusion 

6. Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Joseph Pan whose telephone number is 571- 
272-5987. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached at 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 703- 
872-9306. 

Any inquiry of a general nature or relating to the status of this application 
or proceeding should be directed to the receptionist whose telephone number is 571- 
272-2100. 



/Joseph Pan/ 
Examiner, Art Unit 2435 
November 25, 2008 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



